mirror of https://github.com/jackwener/OpenCLI.git synced 2026-09-14 18:25:42 +08:00

Files

T

jakevin 55088bbb28 feat: 13 read adapters across 5 new sites + 4 extensions (round 3) (#1346 )

New sites (8 commands):
- npm    : search / package / downloads (registry.npmjs.org + api.npmjs.org)
- pypi   : package / downloads (pypi.org + pypistats.org)
- crates : search / crate (crates.io)
- mdn    : search (developer.mozilla.org)
- nvd    : cve (services.nvd.nist.gov)

Extensions (5 commands; +1 dblp/author surfaced in index):
- hf            : spaces (Hugging Face Spaces by likes / created_at / last_modified)
- dblp          : venue (search dblp's venue registry by acronym/topic)
- coingecko     : derivatives (perpetual / futures markets, 24h volume)
- stackoverflow : related (related questions for a given question id)

All commands hit public unauthenticated endpoints (Strategy.PUBLIC, browser:false),
typed-fail-fast on bad inputs (no silent fallback / clamp), and round-trip listing
ids into their detail commands where applicable.

Audits (all green vs baseline):
- typed-error-lint        : 196 = 196 baseline, no new
- silent-column-drop      : 103 = 103 baseline, no new
- listing-id-pairing      : 13 advisory (was 12; +1 = dblp/venue with no
                            corresponding venue-detail command)

Doc coverage : 120/120 adapter dirs documented (+5 new doc pages, +4 updated)
Manifest     : 722 entries (was 709; +13 commands)

Live verified:
- npm search react / npm package react / npm downloads react --period last-week
- npm downloads react --period 2025-01-01:2025-01-05
- pypi package requests / pypi downloads requests --period recent / overall
- crates search tokio / crates crate serde
- mdn search fetch
- nvd cve CVE-2021-44228
- hf spaces --limit 3
- dblp venue ICLR
- coingecko derivatives --limit 3
- stackoverflow related 79935770 --limit 3
- typed-error sanity: invalid CVE id, bad npm name, bad --period

2026-05-06 13:14:41 +08:00

1.9 KiB

Raw Permalink Blame History

NVD (NIST National Vulnerability Database)

Mode: 🌐 Public · Domain: services.nvd.nist.gov

Fetch a single CVE record from the NIST National Vulnerability Database via the public CVE 2.0 API.

Commands

Command	Description
`opencli nvd cve <id>`	Fetch a CVE detail (description, CVSS, CWE, KEV flag)

Usage Examples

# Log4Shell
opencli nvd cve CVE-2021-44228

# Heartbleed
opencli nvd cve CVE-2014-0160

# JSON output for downstream tooling
opencli nvd cve CVE-2021-44228 -f json

Output Columns

Column	Description
`id`	Canonical CVE id
`published`	First published date (`YYYY-MM-DD`)
`lastModified`	Last modified date (`YYYY-MM-DD`)
`vulnStatus`	NVD analysis status (e.g. `Analyzed`, `Awaiting Analysis`)
`baseScore`	CVSS base score (numeric, 0–10)
`severity`	CVSS severity (`CRITICAL` / `HIGH` / `MEDIUM` / `LOW` / `NONE`)
`attackVector`	CVSS attack vector (`NETWORK` / `LOCAL` / `PHYSICAL` / `ADJACENT`)
`cwe`	Comma-separated CWE id(s)
`kevAdded`	CISA KEV (Known Exploited Vulnerabilities) date if present
`description`	English description
`url`	Canonical NVD detail URL

Options

Option	Description
`id` (positional)	CVE identifier (`CVE-YYYY-N…`, case-insensitive). Validated upfront.

Caveats

The CVE id is validated against ^CVE-\d{4}-\d{4,}$; bad input raises ArgumentError.
CVSS columns prefer v3.1, fall back to v3.0, then v2 if neither v3 record is present.
NVD enforces aggressive rate limits without an API key. HTTP 403 and HTTP 429 both surface as typed CommandExecutionError with a retry hint.
Empty / unanalyzed records (no CVSS payload) leave baseScore / severity / attackVector as null / empty rather than fabricating defaults.

Prerequisites

No browser required — uses services.nvd.nist.gov/rest/json/cves/2.0.

1.9 KiB Raw Permalink Blame History Unescape Escape